Jump to content

Please Solve This Hijacking


Recommended Posts

Hello all, Here are my system logs.  I have been working to try and recover this computer, however, I can not seem to remove the hijacking of Internet Explorer, or anyother browers (except Edge).  Furthermore, I seem to be blocked from installing or updating any Malware software or Anti Virus.  The installer(s) time out (System CPU/DISC) usage drop to 0 during installation with no response.  When using portable software (ie Spybot) when I run update, it seems as if the update is being blocked from download from the server.  I am about to refresh Windows 10, but I figure I would seek someone elses keen eyes, if there is something I missed.  Cheers

Addition.txt

FRST.txt

Link to post
Share on other sites

  • Staff

[IMG] Fix with Farbar Recovery Scan Tool
 

[IMG] This fix was created for this user for use on that particular machine. [IMG]
[IMG] Running it on another one may cause damage and render the system unstable. [IMG]


Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!
 

  • Right-click on [IMG] icon and select [IMG] Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Press the Fix button just once and wait.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  • When finished FRST will generate a log on the Desktop, called Fixlog.txt.


Please attach it to your reply.

fixlist.txt

Link to post
Share on other sites

Thank you, it has seemed to release Internet Explorer from the startup page, however anti viruses sites, are still being blocked.  I can visit them in Edge and download eset, however, when I attempt to install, which the installer downloads the necessary files from eset's server, again it hangs and I get a time out error.

Installers seem to hang as well.

 

Link to post
Share on other sites

Sorry for the delay, I have located what I believe is the issue.  Safeguard64.dll was a virus that has embedded it self into my system, which is preventing Malwarebytes from loading, and any anti virus software from updating, or loading properly.  Here is the logs you requested.  I have added in the Zemana AntiMalware log as well if that helps.  Regards,

FRST.txt

2016.03.22-07.14.45-i0-t92-d3.txt

Link to post
Share on other sites

  • Staff

[IMG] Fix with Farbar Recovery Scan Tool
 

[IMG] This fix was created for this user for use on that particular machine. [IMG]
[IMG] Running it on another one may cause damage and render the system unstable. [IMG]


Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!
 

  • Right-click on [IMG] icon and select [IMG] Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Press the Fix button just once and wait.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  • When finished FRST will generate a log on the Desktop, called Fixlog.txt.


Please attach it to your reply.

fixlist.txt

Link to post
Share on other sites

Thank you.  Here is the fixlist.  After the fix was applied, I still noticed some issues.  I force deleted C:\ProgramData\System32\SafeGuard32.dll, and I have seemed to gain control of the malware software and anti virus.  I am running a malwarebytes scan now.  I will keep you posted.  Thank you for your help.

fixlist.txt

Link to post
Share on other sites

  • 3 weeks later...
  • Root Admin

Glad we could help. :)If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.